Privacy Policy

Most privacy policies are long because there's a lot to confess. Ours is short.

What we collect

• A random account ID (a UUID — not your name, number, or email)
• Your public keys, so other people can start encrypted sessions with you
• Encrypted message envelopes, held only until delivery, then deleted
• Encrypted attachment blobs — stored blind, under a hash of a token we never see, until they expire
• Your account creation timestamp

What we don't

• Message content — we can't read it, so we can't collect it
• Your phone number, email, or name — the app never asks for them. (The one voluntary exception is the website's beta-tester signup — see below.)
• IP addresses or device identifiers
• Contact lists
• Analytics, telemetry, or crash reports — there are none, anywhere, including this website

This website

No cookies, no analytics, no trackers, no third-party scripts beyond font files. We don't know you visited, and we like it that way.

One form on this site collects data, and only if you choose to use it: the beta-tester signup on the download page. It takes your email address, forwards it as a single email to the maintainer (delivery transits our email provider, Resend), and stores it in no database — the maintainer's inbox is the entire list. It's used only to tell you when the Play Store beta is available, and a reply asking to be removed is honored immediately.

Deletion

Delete your account and everything goes with it: prekeys, pending envelopes, the account record. Irreversible, immediate, complete.

The technical details behind all of this are on the security page.